Privacy Policy
Last updated: July 26, 2025

1. Introduction

Welcome to Taxi Taxi ("Service", "we", "us", or "our"), a financial management tool powered by Pandacat Inc. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application, whether accessed via the web or any future mobile or tablet applications ("Platforms"). This policy applies to all users of the Service.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Application includes:

  • Personal Data: Personally identifiable information, such as your name, email address, phone number, and date of birth, that you voluntarily give to us when you register with the Application or update your user profile for account recovery purposes.
  • Financial Data: Information related to your finances, such as bank statements (PDFs, images), transaction details (dates, descriptions, amounts), income records, and receipts that you upload or input into the Service. This data is processed to provide you with financial management features.
  • Derivative Data: Information our servers automatically collect when you access the Application, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Application. Firebase services may collect some of this information automatically.
  • Data from AI Processing: When you use features powered by Generative AI (e.g., Google's Gemini models via Genkit), the content you provide (like statement data, receipt images, or voice commands for expense entry) is sent to these AI services for processing. We handle this data as outlined in our AI Features section and the privacy policies of the respective AI providers.
  • Device Information: We may collect information about the device you use to access our Service, including hardware model, operating system and version, unique device identifiers, and mobile network information.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Application to:

  • Create and manage your account, including multi-factor authentication.
  • Process your financial data to generate expense reports, income summaries, and profit & loss statements.
  • Utilize AI models (e.g., via Genkit) to extract data from your uploaded documents, categorize transactions, and calculate taxes.
  • Personalize your experience and offer content or features that match your interests or profile settings (e.g., tax region).
  • Provide customer support, respond to your inquiries, and assist with account recovery.
  • Monitor and analyze usage and trends to improve your experience with the Application and develop new features.
  • Notify you of updates to the Application, changes to our terms, or important service-related announcements.
  • Manage subscription services and payments through Stripe, including processing transactions and handling billing issues.
  • Prevent fraudulent activity, enforce our Terms of Service (including the Fair Use Policy), and protect the security of our Service and users.
  • Comply with legal obligations.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

  • By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies (including our Terms of Service and Fair Use Policy), or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
  • Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including data storage (Firebase Firestore, Firebase Storage), AI model providers (Google AI via Genkit), payment processing (Stripe), email delivery, hosting services, and customer service. These providers are authorized to use your information only as necessary to provide these services to us.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

We do not sell your personal information to third parties for their marketing purposes. When data is sent to AI models for processing, its use is governed by the privacy policies of those AI providers (e.g., Google). We strive to use AI services that prioritize data privacy and offer appropriate data protection measures.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. This includes measures like data encryption where appropriate and access controls. Our infrastructure is built on Firebase, which provides robust security features. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information. You are responsible for maintaining the security of your account credentials.

6. Data Retention and Deletion

We will retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

You may request the deletion of your account and associated personal data by contacting us. Upon receiving a deletion request, we will take steps to delete your information within a reasonable timeframe, subject to any legal or operational retention needs. Please note that some information may remain in our backup systems for a limited period.

If your account is terminated due to a violation of our Terms of Service, including the Fair Use Policy, we reserve the right to retain certain information necessary to prevent future abuse or to comply with legal requirements. Data associated with such terminated accounts, including uploaded files, may be deleted.

7. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13 (or a higher age if stipulated by applicable local laws). If you become aware of any data we have collected from children under the relevant age, please contact us using the contact information provided below, and we will take steps to delete such information.

8. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information, such as the right to access, correct, update, or request deletion of your personal information. To exercise these rights, please contact us. We will respond to your request in accordance with applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you through the Service or via email. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:
Pandacat Inc.
Email: privacytaxitaxi@pandacat.ca